CVE-2022-2074

🗓️ 19 Aug 2022 09:00:20Reported by OctopusType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 64 Views

Possible Regex DoS in Octopus Deplo

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-2074	19 Aug 202209:15	–	attackerkb
Circl	CVE-2022-2074	19 Aug 202212:17	–	circl
CNNVD	Octopus Deploy 安全漏洞	19 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-2074	19 Aug 202209:00	–	cvelist
EUVD	EUVD-2022-34365	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2074	19 Aug 202209:15	–	nvd
OSV	CVE-2022-2074	19 Aug 202209:15	–	osv
Prion	Denial of service	19 Aug 202209:15	–	prion
Positive Technologies	PT-2022-14840 · Unknown · Octopus Deploy	19 Aug 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-2074	22 May 202523:38	–	redhatcve

NVD

Node

octopus octopus_serverRange0.9–0.9.620.4

octopus octopus_serverRange1.0–1.6.3.1723

octopus octopus_serverRange2.0–2.6.5

octopus octopus_serverRange3.0.0–3.17.14

octopus octopus_serverRange4.0.4–4.1.10

octopus octopus_serverRange2018.1.0–2018.12.1

octopus octopus_serverRange2019.1.0–2019.13.7

octopus octopus_serverRange2020.1.0–2020.6.5449

octopus octopus_serverRange2021.1.6959–2021.3.13021

octopus octopus_serverRange2022.1.0–2022.1.2894

octopus octopus_serverRange2022.2.6729–2022.2.6872

octopus octopus_serverRange2022.3.348–2022.3.4953

AND

linux linux_kernelMatch-

microsoft windowsMatch-

[
  {
    "product": "Octopus Server",
    "vendor": "Octopus Deploy",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "0.9",
        "versionType": "custom"
      },
      {
        "lessThan": "2022.1.2894",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2022.2.6729",
        "versionType": "custom"
      },
      {
        "lessThan": "2022.2.6872",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2022.3.348",
        "versionType": "custom"
      },
      {
        "lessThan": "2022.3.4953",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
advisories	www.advisories.octopus.com/post/2022/sa2022-11/

21 Nov 2024 07:00Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

EPSS0.00482